Re: IUSR and IWAM accounts in Active Directory

From: Chris Crowe [MVP] (IISMVP2005_at_iisfaq.homeip.net)
Date: 09/22/05

  • Next message: Bob Chauvin \( Paix dehors \): "Re: WEBDAV Authentication"
    Date: Thu, 22 Sep 2005 20:32:56 +1200
    
    

    Basically just add the accounts you create to the LOCAL machine group called
    IIS_WPG

    This will ensure that the accounts have the correct permission for the IIS
    Worker Processes

    Also you may need to grant rights to the new accounts (or the IIS_WPG) for
    any writing to folders on the IIS Servers

    -- 
    Cheers
    Chris
    Chris Crowe [IIS MVP]
    http://blog.crowe.co.nz
    "Hiro" <Hiro@discussions.microsoft.com> wrote in message 
    news:B0EC35B6-5815-4451-A8CF-78DCD058EA18@microsoft.com...
    > Our web servers (IIS 6/ WIN2k3) need access to a file server. I would like 
    > to
    > create the IUSR and IWAM accounts under active directory and grant access 
    > to
    > the web server through one of these accounts.
    > My questions regarding this setup are:
    >
    > What rights do the IUSR and IWAM accounts need to do their jobs correctly?
    > Are there any white papers explaining this?
    > Am I taking the best approach for what needs to be done? 
    

  • Next message: Bob Chauvin \( Paix dehors \): "Re: WEBDAV Authentication"

    Relevant Pages

    • Re: Please help refresh my memory on AD DC
      ... use only domain user accounts. ... "Meinolf Weber" wrote: ... Remote server ... Also that one for IIS. ...
      (microsoft.public.windows.server.active_directory)
    • RE: IIS Integrated Windows Authentication problem
      ... to "Show friendly HTTP error messages." ... Make sure that all the accounts have the "Access this computer from the ... > - After extensive searching in the IIS logs, ... >>to Integrated Windows Authentication only. ...
      (microsoft.public.inetserver.iis.security)
    • Re: CGI apps break after DCPROMO an IIS6 server
      ... This is one of those things different on a DC vs a member server in regards ... The "built in" accounts have the minimum and necessary privileges to run ... >privileges listed in F1-help of IIS Manager UI required ...
      (microsoft.public.inetserver.iis.security)
    • Re: IIS folder structure and security.
      ... That's basic Windows security, not limited to IIS so a decent Windows ... >> In the IIS each site have it's root to the 'www' folder. ... >> Windows accounts and set NTFS permissions on each customers folder? ...
      (microsoft.public.inetserver.iis.security)
    • Re: IIS..MBSA...Anonymous Access
      ... not use the default usernames for IIS. ... trying to gain access to IIS via those default accounts. ... >> had me disable the IUSR & IWAM user accounts. ...
      (microsoft.public.inetserver.iis.security)